When  you Install Symantec Mail Security for exchange 6.0 for the first time, it creates a service account on the domain controller which is SMSE.

Solution:

1. on the domain controller search for this service account SMSE

2. Add the users account that  you want to use to access the console

3. log off

on the system were you installed the console use the account that is a member of the SMSE service account member.

regards

ALEX

Many thanks, Alex! 

A couple additional details: there are actually two Active Directory Global Security Groups created during the SMSMSE install: SMSMSE Admins and SMSMSE Viewers.  You can see them, and check account memberships, in Active Directory Users and Computers. 

Some brief details on the purpose of each can be found in the "Role Based Administration" section of the following article.

New features in Symantec Information Foundation Mail Security 6.x for Microsoft Exchange 2000 Server/Server 2003

Definitely check that the user account that you are logged into Windows with, when trying to log into the SMSMSE Console, is a member of the SMSMSE Admins! 

Thanks and best regards,

Mick
 

Hi,

you also can verify the SMSMSE DCOM interface which can in some case have also different privileges, when you are work in a subdomain with a domainadmin of the parent domain.

bye,
toby

So i was having the same problem, even though I am a domain admin I cannot open the console. So i go look on the endpoint CD and there is a readme file on there (my path= \Symantec Endpoint Protection\Mail_Security_For_MSE v6.0.8.262\readme.txt ) and in that file it states all these registry permissions and folder permissions to change.

So i didnt have either SMSMSE Admins, or SMSMSE Viewers groups, but I added domain admins to all the places where it said to add those groups. Still didnt work. Then on a lark I thought, well why not, and created those two groups above in AD. I added domain admins as a member to those groups and boom, everything now works.

I guess it was just looking for the specific NAME of the group and didnt really care about permissions at all. Very annoying. Here is the relevant text from the README.txt. You also might want to give domain admins permissions to the registry keys and folders located in that readme txt

To resolve this error please follow the steps below:
1) Open the Active Directory and select the Users.
2) Check whether user groups "SMSMSE Admins" and "SMSMSE Viewers"
exists/created in active directory or not, after the installation of
Symantec Mail Security for Microsoft.
   a. If these user groups exist then open these groups, go to "Member" tab
      and add the user (for which the insufficient permission error is
      appearing).
   b. If these groups are not present then right click on "User",
      select "New" and then select "Group". First create the group with
      name "SMSMSE Admins" and same way create group with name
      "SMSMSE Viewers". After creating these follow the same step mentioned
      as above (point a.)
3) After doing this log off and log in again to open Symantec Mail Security
for Microsoft Exchange application.

Very late response to this one... but thanks to all!

Mick, your suggestion worked - I followed the guide on the link to add the Domain Admin group to the SMSMSE Admins groups and that allowed me to gain access to the console.

Thanks to all!